Answered by:
Create Active Directory Security Group Based on membership of SCCM collection

Question
-
Is it possible to create a AD security group on SCCM collection membership?
What I am trying to do is run a script against a group of PC's that failed to run an advertisement, I cannot use SCCM as a TS is stuck/windows updates are broken and this combination leads to a paused software distribution which the script fixes.
Maybe I am looking at this the wrong way? So if anyone can come up with a way to create a security group based on a failed advertisement that would be great, I don't want to run the script against the whole domain using a WMI filter, but then again I could use a manual process to put all the PC's into a security group, I was trying to find an automated way of keeping the SCCM collection which uses a report status to auto update and the security group in tandem, so that I wouldn't have to keep amending it.
Anyone have any idea?? I appreciate that this is "back to front" of a normal SCCM / AD question,
cheers
many thanks
- Edited by MisterD101 Thursday, June 12, 2014 12:13 PM
Thursday, June 12, 2014 10:59 AM
Answers
-
have you read the thread to create collection based on the status message code ?
Eswar Koneti | Configmgr blog: www.eskonr.com | Linkedin: Eswar Koneti | Twitter: Eskonr- Proposed as answer by Garth JonesMVP Tuesday, December 23, 2014 4:33 PM
- Marked as answer by Garth JonesMVP Saturday, January 3, 2015 3:55 PM
Monday, June 23, 2014 3:12 AM
All replies
-
If you have a query to add failed computers to a collection, you can script in vbs or PS to get collection member or you can do one to gather all PCs that has failed status for the advertisement to add it to the SG. It be can be run manually every so often or set it in task scheduler.
- Edited by Harvey Gee Saturday, June 21, 2014 1:12 AM
Saturday, June 21, 2014 1:10 AM -
have you read the thread to create collection based on the status message code ?
Eswar Koneti | Configmgr blog: www.eskonr.com | Linkedin: Eswar Koneti | Twitter: Eskonr- Proposed as answer by Garth JonesMVP Tuesday, December 23, 2014 4:33 PM
- Marked as answer by Garth JonesMVP Saturday, January 3, 2015 3:55 PM
Monday, June 23, 2014 3:12 AM -
Thanks for the response Eswar, I am trying to create a Active Directory security group based on an SCCM collection, so unfortunately this method isn't applicable but thanks for the suggestion, I will try and find some VB to collect the computernames in a SCCM collection and add them to a AD security group, I know it is opposite to what is normally done with SCCM and AD groups..
many thanks
Monday, June 23, 2014 7:05 AM